> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Turn on Remote Desktop

> Enable Apple Remote Desktop on managed Mac computers from Iru Endpoint. Allow remote screen sharing, observation, and management for IT support.

<Callout icon="apple" color="#B84A7A" iconType="regular">This guide applies to Mac computers</Callout>

### About Remote Desktop

Remote Desktop on macOS gives you the flexibility to access and manage your Mac computers from a different location using Apple or other third-party tools to initiate screen sharing.

### How It Works

Remote Desktop uses the virtual network computing (VNC) protocol to facilitate screen-sharing sessions between admin and client Mac computers. Iru Endpoint uses the EnableRemoteDesktop MDM command to allow all local users on the Mac to observe and control the device, which is the standard configuration set by macOS.

Once Remote Desktop is activated, you can use the following Apple tools to start a screen-sharing session, depending on your needs:

* **Apple Remote Desktop** - This tool is designed for managing multiple Mac computers remotely. It allows IT administrators to control screens, send files, and execute commands on client Macs.
* **Screen Sharing** - This built-in feature of macOS allows users to view and control another Mac's screen over the network. It is simple to set up and doesn't require additional software. However, it is typically limited to local network connections and offers basic functionality compared to Apple Remote Desktop

### Enabling Remote Desktop in the Iru Endpoint Web App

<Steps>
  <Step title="Navigate to Device Record">
    Navigate to the Device Record for the Mac you'd like to enable Remote Desktop on.
  </Step>

  <Step title="Enable Remote Desktop">
    Open the Device Action Menu, and select **Turn on Remote Desktop**.
  </Step>
</Steps>

### Disabling Remote Desktop in the Iru Endpoint Web App

<Steps>
  <Step title="Navigate to Device Record">
    Navigate to the Device Record for the Mac you'd like to disable Remote Desktop on.
  </Step>

  <Step title="Disable Remote Desktop">
    Open the Device Action Menu, and select **Turn off Remote Desktop**.
  </Step>
</Steps>

### Enabling or Disabling Remote Desktop in Bulk

To enable or disable Remote Desktop on multiple devices at once, you can use the Device Actions API script ([GitHub Link](https://github.com/kandji-inc/support/tree/main/api-tools/device-actions))

### Customizing Permissions when Enabling Remote Desktop

Using the Turn on Remote Desktop device action enables **all** local users on the Mac to observe and control the device, which is the [default configuration applied by macOS](https://support.apple.com/en-us/HT209161). To customize permissions more specifically, you can use the kickstart command-line utility included in macOS and deploy it as a [Custom Script](/en/endpoint/library/library-items-profiles/custom-scripts-overview).

<Note>
  Please be aware that while the kickstart command can still be used to apply more detailed settings for Remote Desktop, it is no longer capable of enabling or disabling Remote Management starting from macOS 12.1 or later.
</Note>

For instance, you can use the [Audit Script](https://github.com/kandji-inc/support/blob/main/Scripts/remote-desktop/remote_desktop_audit.zsh) from the Iru Endpoint support GitHub repository to ensure that Remote Desktop is configured with more detailed settings. If it is not configured as desired, you can use the [Remediation Script](https://github.com/kandji-inc/support/blob/main/Scripts/remote-desktop/remote_desktop_remediation.sh) from the same repository to grant full privileges only to a user with the username "ladmin." Refer to the comments in the script for further customization options, along with:

```
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -h
```